Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: 9xVSxUMT+13AAvDScjfaSHtpQmT7cmpUXQmdPHvjxsc=
Subject key identifier: 37:7A:E8:FE:C1:B1:9C:A0:E7:5D:AC:AF:2A:2B:14:13:EA:DB:B4:79
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019848C0542B7C8F6A876B2D55C1D934D997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1609
Signing time: Sat 26 Jul 2025 22:00:20 +0000
Manifest this update: Sat 26 Jul 2025 22:00:20 +0000
Manifest next update: Sun 27 Jul 2025 22:00:20 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: TLGbDrd2Kn7BMPoMepMOTn90wStNyLzwV4LSPNPNSXQ=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:54:2b:7c:8f:6a:87:6b:2d:55:c1:d9:34:d9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Jul 26 22:00:20 2025 GMT
Not After : Jul 27 22:00:20 2025 GMT
Subject: CN=377ae8fec1b19ca0e75dacaf2a2b1413eadbb479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:71:2c:c0:b5:67:3e:f0:54:dc:78:d3:d1:
84:b1:bc:aa:28:fa:43:11:7f:5b:d1:24:af:27:de:
28:38:b1:81:90:d7:db:ec:b8:49:ce:1a:c1:8c:f8:
f0:34:62:56:cb:d2:c3:d8:0c:d4:78:99:f7:c5:9e:
1a:b0:10:5b:86:5b:b9:60:c1:aa:79:a0:1a:02:3b:
66:bc:ea:94:83:c8:8e:ea:b5:d8:81:0e:37:61:42:
e3:fb:53:c9:d3:37:70:28:ee:65:3c:e5:92:03:b8:
8b:37:60:50:b2:dd:e3:3b:f8:18:c5:3a:cc:98:8d:
25:b6:b5:a1:83:7c:70:c4:4c:7e:9d:91:f2:1b:da:
48:45:0a:ad:be:b0:d4:cd:da:09:08:78:4c:be:8e:
3e:a9:3b:bc:a3:16:58:ac:06:3e:39:d7:a0:01:5a:
3b:37:a7:5f:de:8f:56:bd:b4:47:fe:68:ed:7f:7e:
d7:d0:b0:e6:b3:28:74:94:cb:ae:ba:ed:ba:fb:4d:
a3:13:08:d0:72:16:65:a9:3b:d6:92:d4:a4:50:ff:
1e:d9:b2:1d:f5:52:90:fc:6f:f5:5a:58:20:c1:1d:
4e:ac:a6:44:ca:e7:69:a4:31:c3:38:43:c2:1b:e0:
3b:90:55:6c:59:42:3b:02:4b:95:08:33:73:a8:08:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:E8:FE:C1:B1:9C:A0:E7:5D:AC:AF:2A:2B:14:13:EA:DB:B4:79
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:07:45:e2:9b:ea:b8:bc:4e:ec:cd:69:3a:c7:16:6f:6a:
33:0d:10:a4:7c:ad:e6:75:aa:7a:d0:d2:94:77:90:4d:05:95:
fc:bd:95:f1:98:25:7e:f0:0c:fa:a2:28:da:e5:e2:03:61:13:
c8:62:dc:71:c7:fb:65:c2:d5:fe:d4:53:85:e6:5d:86:bc:7c:
33:e1:7a:74:2a:ce:ea:b1:b6:b3:6d:1f:8a:68:26:d4:f6:cf:
99:ae:a0:7b:b5:dc:ab:76:28:fd:36:22:6a:77:06:98:7b:6a:
22:b0:9c:a3:4d:27:1f:86:d1:d8:30:d7:f9:39:70:eb:cc:34:
1e:50:11:57:77:2e:f0:b3:2f:f4:44:23:b4:6a:71:32:cb:32:
fb:86:df:1c:5a:85:3a:ba:0a:0a:5c:c9:96:a4:12:09:5a:6d:
ab:3f:6b:5e:0a:9f:c8:8a:ef:0c:fe:6a:79:50:8b:ac:03:ae:
60:25:aa:c0:f3:da:57:3f:9f:6d:0b:8d:44:44:45:cc:67:56:
d1:3c:a5:d1:89:f6:ee:f1:f8:15:0d:16:c0:cc:31:94:85:94:
1e:14:ba:1b:e0:b9:47:5d:1d:47:a2:33:80:94:c2:f0:e2:75:
f7:e4:8e:da:97:50:bf:03:93:ae:e5:14:f1:27:e4:89:38:2b:
19:e9:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:16 2025 by rpki-client